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DETAILED ACTION 

1 . Claims 1 -5, 7-1 9, 21 , and 22 are pending in this office action. 

Rejections 

2. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior office action. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

4. Claims 1, 2, 8, 9, and 21 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Rafizadeh (U.S. Patent No. 6,401,183). 

Regarding claim 1 , Rafizadeh teaches a method comprising: 
• Providing a partition on an Integrated Device Electronics (IDE) storage device 

of a computer system, wherein said partition is invisible to an operating system of 
the computer system unless the partition is unlocked (fig. 3 and col. 10, lines 21- 

26); 
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• Providing a software task having knowledge about a proper handshake to unlock 
the partition such that the partition that was previously invisible to the operating 
system becomes visible to the operating system (fig. 1, ref. num 5, fig. 13, ref. 
num 316 and col. 8, lines 53-66); and 

• Unlocking the partition in response to an unlock request received from the 
software task having knowledge about the handshake to unlock the partition, 
wherein the partition is visible to the operating system when unlocked (col. 8, 
lines 53-55). 

Regarding claim 2 . Rafizadeh teaches wherein the storage device is a hard disk 
drive having an IDE disk controller (col. 1, lines 13-17). 

Regarding claim 8 . Rafizadeh teaches further comprising locking the partition in 
response to a lock request received from a software having knowledge about a proper 
handshake for locking the partition (fig. 13, ref. num 316, col. 2, lines 47-48, and col. 8, 
lines 53-66). 

Regarding claim 9 . Rafizadeh teaches further comprising providing a standard 
partition on the storage device (fig. 14, ref. num 102-1 12), wherein said standard 
partition is always visible to the operating system and generally accessible to other 
software (col. 1, lines 13-17). 
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Regarding claim 21 , Rafizadeh teaches preventing an access to the partition 
when the partition is unlocked unless the access is requested by a software having 
knowledge about a proper access handshake for accessing the partition (col. 9, lines 
35-61). 

Claim Rejections - 35 USC § 103 

5. Claims' 3-5, 7. 10-19, and 22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Rafizadeh (US PN '183) in view of Puckette (U.S. Patent No. 
6,385,721). 

Regarding claim 3 , Rafizadeh teaches all the limitations of claim 1 , above. 
However, Rafizadeh does not teach wherein the unlocking of the partition is initiated by 
establishing a proper unlock handshake between the software task and an IDE 
controller for controlling the storage device. 

Puckette teaches wherein the unlocking of the partition is initiated by establishing 
a proper unlock handshake between the software task and an IDE controller for 
controlling the storage device (col. 7, lines 47-58). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine unlocking the partition by establishing a handshake 
between the software task and the IDE controller, as taught by Puckette , with the 
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method of Rafizadeh . It would have been obvious for such modifications because the 
BIOS, which can be stored in a secure hibernation partition, can be updated securely by 
providing the proper credentials to unlock the secure partition (see col. 7, lines 47-58 of 
Puckette). 

Regarding - claim 4 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the software task requests a master token from the IDE controller 
when the computer system is first turned on and the unlock handshake between the 
software task and the IDE controller is established by passing the master token back to 
the IDE controller as a parameter (see col. 7, line 59 through col. 8, line 7 of Puckette). 

Regarding claim 7 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the software receives a usage token from an IDE controller when the 
partition is unlocked and the access handshake between the software and the IDE 
controller is established by passing the usage token back to the IDE controller as a 
parameter (see col. 7, line 59 through col. 8, line 7 of Puckette). 

Regarding claim 5 , Rafizadeh teaches all the limitations of claims 1 and 2, above. 
However, Rafizadeh does not teach wherein the software task requests a master token 
from the disk controller when the computer system is first turned on, said master token 
is used by the software task to initiate the proper handshake to unlock the partition. 
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Puckette teaches wherein the software task requests a master token from the 
disk controller when the computer system is first turned on, said master token is used 
by the software task to initiate the proper handshake to unlock the partition (col. 7, line 
59 through col. 8, line 7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine requesting a master token from the disk controller 
upon start up, wherein the token is used by the software task to initiate a proper unlock 
handshake, as taught by Puckette , with the method of Rafizadeh . It would have been 
obvious for such modifications because the token provides encryption/decryption 
capabilities for the data residing the on the secure hibernation partition (see col. 8, lines 
2-7 of Puckette). 

Regarding claim 10 , Rafizadeh teaches a machine-readable medium that 
provides instructions, which when executed by a set of processors, causes said set of 
processors to perform operations comprising: 

• Receiving an open request from a software to access a secure-private partition 
on an IDE hard drive of a computer system (col. 8, lines 53-55); 

• Requesting unlocking of the secure-private partition in response to the validation 
of the open request received from the software (fig. 13, ref. num 316 and col. 8, 
lines 53-66); 
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• Unlocking the secure-private partition in response to the unlocking request such 
that the partition that was previously invisible to an operating system becomes 
visible to the operating system (col. 8, lines 53-55); and 

• Preventing an access to the secure-private partition when the secure-private 
partition is unlocked unless the access is requested by a software having 
knowledge about a proper access handshake for accessing the secure-private 
partition (col. 9, lines 35-61). 

Rafizadeh does not teach validating the open request received from the software. 

Puckette teaches validating the open request received from the software (col. 8, 
lines 14-24). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine validating the open request received from the software, 
as taught by Puckette , with the medium of Rafizadeh . It would have been obvious for 
such modifications because password validation, or other means of validation, protects 
against malicious code from randomly "guessing" the appropriate validation parameters. 



Regarding claim 11 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the operations further comprise requesting locking of the 
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secure-private partition in response to a close request received from the software (see 
fig. 13, ref. num 316 and col. 8, lines 53-66 of Rafizadeh). 

Regarding claim 12 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the requesting of the unlocking of the secure partition further 
comprises: requesting a master token from an IDE controller when the computer system 
is turned on; storing the master token in a secure storage location; retrieving the master 
token from the secure storage location when an access to a secure-private partition is 
needed; and passing the master token as a parameter to the IDE controller (col. 7, line 
59 through coL 8, line 7). 

Regarding claim 13 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the operations further comprise requesting an access to the 
secure-private partition in response to an access request received from the software 
(see col. 7, lines 47-58 of Puckette, BIOS is the software). 

Regarding claim 14 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the requesting of the access to the secure partition further comprises: 

• Receiving a usage token (see coL 8, lines 2-7 of Puckette); and 

• Passing the usage token to the IDE controller to gain an access to the secure 
partition (see col. 8, lines 2-7 of Puckette). 
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Regarding claim 15 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the request from the software to access the secure-private partition is 
received by a privacy gatekeeper which prescreens the request to determine if the 
software has an authorization to access the secure-private partition (see fig. 2, ref. num 
56 and col. 8, lines 14-24 of Puckette). 

Regarding claim 16 , Rafizadeh teaches a system comprising: 

• A storage device having a storage controller (col. 1 , lines 1 3-1 7), 

o Said storage device having at least one secure-private partition (fig. 3 t ref. 
num 14), 

o Wherein said secure-private partition is selectively in one of locked and 
unlocked modes, wherein said secure-private partition is invisible to an 
operating system when it is locked and the secure-private partition is 
visible to the operating system when it is unlocked (col. 10, lines 21-26); 

• An IDE controller operatively coupled to the storage controller (col. 1 , lines 13- 
17); and 

• A security/privacy software task operatively coupled to the IDE controller (fig. 1 , 
ref. num 5), 

o Wherein an unlock request is initiated to unlock the secure-private 
partition in response to a valid unlock handshake, and initiating a lock 
request to lock the secure-private partition in response to a valid lock 
handshake (fig. 13, ref. num 316 and col. 8, lines 53-66). 
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Rafizadeh does not specifically teach the IDE controller initiating an unlock/lock 
request in response to an unlock/lock request between the IDE controller and the 
software task. 

Puckette teaches the IDE controller initiating an unlock/lock request in response 
to an unlock/lock request between the IDE controller and the software task (col. 7, line 
47 through col. 8, line 7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the IDE controller initiating an unlock/lock request in 
response to an unlock/lock request between the IDE controller and the software task, as 
taught by Puckette , with the system of Rafizadeh . It would have been obvious for such 
modifications because the BIOS, which can be stored in a secure hibernation partition, 
can be updated securely by providing the proper credentials to unlock/lock the secure 
partition (see col. 7, lines 47-58 of Puckette) and the token used for gaining access 
provides encryption/decryption capabilities for the data residing the on the secure 
hibernation partition (see col. 8, lines 2-7 of Puckette). 

Regarding claim 17 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the security/privacy software task requests a master token from the 
IDE controller when the system is turned on and sends the master token to the IDE 
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controller as a parameter when making a request to the IDE controller to unlock the 
secure-private partition (see col. 7, line 59 through col. 8, line 7 of Puckette). 

Regarding claim 18 , the combination of Rafizadeh as modified by Puckette 
teaches further comprising a requesting software and a privacy gatekeeper which acts 
as a gatekeeper to the security/privacy software task (see fig. 2, ref. num 56 of 
Puckette), wherein when the requesting software makes a request to access the 
secure-private partition, the privacy gatekeeper prescreens the request to determine if 
the requesting software has an authorization to access the secure-private partition (see 
fig. 2, ref. num 56 and col. 8, lines 14-24 of Puckette). 

Regarding claim 19 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the IDE controller allows an access to said at least one secure-private 
partition only when a valid access handshake is established between the requesting 
software and the IDE controller (see col. 8, lines 14-24 of Puckette). 

Regarding claim 22 , the combination of Rafizadeh as modified by Puckette 
teaches wherein the IDE controller generates and returns a usage token to the 
requesting software once the secure-private partition is unlocked (see col. 7, line 59 
through col. 8, line 7 of Puckette), wherein the access handshake is established 
between the IDE controller and the requesting software when the IDE controller 
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validates the usage token passed back by the requesting software (see col. 8, lines 14- 
24 of Puckette). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon Hoffman whose telephone number is 571-272- 
3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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